$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft File: MCcwgVkVGUGrc0xyBhfff9zCQQw.mft (raw, json) Hash identifier: 7MyQayOZPwAyBdQdk3rIbrMDcBbm+O+RCIv/RyyMzVA= Subject key identifier: A2:E9:7E:63:D8:13:C0:5F:47:01:7B:0A:79:2C:1B:97:8B:25:18:D0 Authority key identifier: 30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C Certificate issuer: /CN=A91D17E8/serialNumber=3027308159151941AB734C720617DF7FDCC2410C Certificate serial: 100E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft Manifest number: 0FF6 Signing time: Sun 02 Nov 2025 17:29:56 +0000 Manifest this update: Sun 02 Nov 2025 17:29:55 +0000 Manifest next update: Sun 09 Nov 2025 17:29:55 +0000 Files and hashes: 1: MCcwgVkVGUGrc0xyBhfff9zCQQw.crl (hash: sDWSw5C+b3Ki7odvHtwaqAO0JRhrmbFRsRJ2yEnRTvw=) 2: 1777F060A7CE11E980B87114C4F9AE02.roa (hash: HeL3v4bVI9uczPOUq41UBh1VIigK//d/8NJCyMV1Esw=) 3: D8C69E2A5C5511E98C4B6D6BC4F9AE02.roa (hash: jKjjt2VMX2OyaKrGVueLOjhPSZoYcuGJoWMyYUxs8bM=) 4: 35A169488D8611E9B1106E6FC4F9AE02.roa (hash: MIfxKi8mqzy4qfoso9S7UhSd/IeBwSzQBKvFHVpyedo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4110 (0x100e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D17E8, serialNumber=3027308159151941AB734C720617DF7FDCC2410C Validity Not Before: Nov 2 17:29:55 2025 GMT Not After : Nov 9 17:29:55 2025 GMT Subject: CN=69079514-87a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b0:ac:1b:88:22:e5:e4:ea:24:a3:3a:3c:fe: 5a:f0:6b:ba:71:0f:bc:e4:f6:ee:c7:db:cd:90:39: 56:cb:40:9e:9f:60:70:df:0a:af:32:6f:1f:03:5d: 6e:40:f8:f1:5f:81:26:31:a0:5b:9e:75:09:42:e3: c0:ba:e5:3d:ad:b2:9d:2c:91:01:8e:20:03:a8:cb: 62:a6:e4:ed:d8:a6:59:55:1c:cf:9f:65:8d:71:91: 83:f7:22:81:4d:19:f7:53:df:bf:bd:25:6e:97:cc: 49:ff:8d:8d:96:35:ca:82:2e:12:b8:6e:30:65:08: 8b:46:60:53:57:a8:8e:10:b4:cb:d5:ef:03:6c:6a: 88:aa:8e:2f:22:cf:f9:ee:98:ef:c0:88:6c:73:14: 72:35:31:fd:f8:12:4b:4b:0f:84:25:40:ee:c3:26: 78:72:be:86:76:86:66:21:46:10:5d:d6:a1:ea:5e: 2c:1b:e1:96:0c:af:de:3e:3f:c5:71:d3:49:30:fd: 63:23:af:91:cf:14:69:37:a7:1b:fc:0b:8e:83:74: e5:86:6d:09:58:4a:16:d4:2b:88:2c:61:0e:64:a2: c3:20:70:2f:15:f4:15:51:d8:6f:a4:81:1f:17:2c: 85:06:7b:b2:c4:88:90:50:3f:e7:a3:67:5e:3f:d7: 9e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E9:7E:63:D8:13:C0:5F:47:01:7B:0A:79:2C:1B:97:8B:25:18:D0 X509v3 Authority Key Identifier: keyid:30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d5:86:90:fd:d3:c2:7f:76:cf:a2:03:9a:fd:76:67:28:14: aa:84:ec:e3:da:57:99:39:6f:ce:c7:2f:1e:5c:db:42:21:33: 55:47:b1:6a:15:01:ff:30:b7:b4:18:e0:6c:a9:75:b0:37:6e: 6e:69:8e:10:cd:10:45:a1:93:2a:b1:64:0c:d9:ae:fa:9f:0c: aa:0e:ba:d7:48:ef:f3:8d:d8:02:50:b2:55:09:7e:5d:d1:95: 03:06:8d:58:3e:51:a3:a8:62:34:81:81:14:d9:55:f6:f2:94: c4:64:4d:e3:33:18:cd:c7:29:9d:d4:c4:50:4c:44:bf:0b:5f: fd:ae:62:ac:73:d0:20:b4:a3:d2:5b:de:aa:c4:d8:7b:fb:af: 37:86:65:ac:db:26:a2:70:d4:cd:32:5f:43:85:ab:54:45:4b: 54:da:91:4e:ca:b4:80:30:1b:5b:89:2a:de:92:e2:cb:ad:1c: 4d:16:45:eb:b7:b2:c2:d6:90:37:db:ff:ec:c9:88:95:d7:cc: b2:53:d2:36:db:89:09:8b:fd:bc:19:d9:5b:f2:9c:42:5a:ed: 31:be:86:16:ea:bf:0a:aa:e7:44:fc:55:7b:a8:de:38:0d:56: 5e:28:e0:d1:a9:cf:67:42:3b:01:f5:3f:8e:f4:60:48:12:bc: 28:13:ed:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE3RTgxMTAvBgNVBAUTKDMwMjczMDgxNTkxNTE5NDFBQjczNEM3MjA2MTdERjdG RENDMjQxMEMwHhcNMjUxMTAyMTcyOTU1WhcNMjUxMTA5MTcyOTU1WjAYMRYwFAYD VQQDEw02OTA3OTUxNC04N2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7CsG4gi5eTqJKM6PP5a8Gu6cQ+85Pbux9vNkDlWy0Cen2Bw3wqvMm8fA11u QPjxX4EmMaBbnnUJQuPAuuU9rbKdLJEBjiADqMtipuTt2KZZVRzPn2WNcZGD9yKB TRn3U9+/vSVul8xJ/42NljXKgi4SuG4wZQiLRmBTV6iOELTL1e8DbGqIqo4vIs/5 7pjvwIhscxRyNTH9+BJLSw+EJUDuwyZ4cr6GdoZmIUYQXdah6l4sG+GWDK/ePj/F cdNJMP1jI6+RzxRpN6cb/AuOg3Tlhm0JWEoW1CuILGEOZKLDIHAvFfQVUdhvpIEf FyyFBnuyxIiQUD/no2deP9ee7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLpfmPY E8BfRwF7CnksG5eLJRjQMB8GA1UdIwQYMBaAFDAnMIFZFRlBq3NMcgYX33/cwkEM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTdFOC9GMTZFMTg1NjVD NTMxMUU5OUFCNUNGNjhDNEY5QUUwMi9NQ2N3Z1ZrVkdVR3JjMHh5QmhmZmY5ekNR UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01DY3dnVmtWR1VHcmMweHlCaGZmZjl6Q1FRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTdFOC9GMTZFMTg1NjVDNTMxMUU5OUFCNUNGNjhDNEY5QUUwMi9NQ2N3Z1ZrVkdV R3JjMHh5QmhmZmY5ekNRUXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL1YaQ/dPCf3bPogOa/XZnKBSqhOzj2leZOW/Oxy8eXNtCITNVR7Fq FQH/MLe0GOBsqXWwN25uaY4QzRBFoZMqsWQM2a76nwyqDrrXSO/zjdgCULJVCX5d 0ZUDBo1YPlGjqGI0gYEU2VX28pTEZE3jMxjNxymd1MRQTES/C1/9rmKsc9AgtKPS W96qxNh7+683hmWs2yaicNTNMl9DhatURUtU2pFOyrSAMBtbiSrekuLLrRxNFkXr t7LC1pA32//syYiV18yyU9I224kJi/28Gdlb8pxCWu0xvoYW6r8KqudE/FV7qN44 DVZeKODRqc9nQjsB9T+O9GBIErwoE+2z -----END CERTIFICATE-----Generated at Tue Nov 4 08:05:28 2025 by rpki-client